An
Email with the Subject "Letter Of Intent" was
received in one of Scamdex's honeypot email accounts on 06 Jul 2020 04:37:14 -0000
and has been classified as a Generic Scam Email.
The sender shows as Mr. Colin Brent <secureserver@servers.com >.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
bankcontactwinaccountclaimpaymentopportunityresponsiblecommission80%50%processfund transfersecuremailbank bank account hsbc bank the bank home bank accrued bank hsbcbrent556@gmail.com will nmr. colin brent mr. colin brent,financial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[delivered-to:] => Array
(
[0] => unknown
[1] => scamdex@gmail.com
)
[received:] => Array
(
[0] => from imap.gmail.com (74.125.195.108:993) by mail.scamalot.com with IMAP4-SSL; 06 Jul 2020 04:37:14 -0000
[1] => by 2002:a05:6638:24f:0:0:0:0 with SMTP id w15csp521894jaq; Wed, 17 Jun 2020 04:07:36 -0700 (PDT)
[2] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id s17sor11623949otd.19.2020.06.17.04.07.36 for (Google Transport Security); Wed, 17 Jun 2020 04:07:36 -0700 (PDT)
[3] => from servers.com ([103.125.189.73]) by gmr-mx.google.com with ESMTP id y198si782722oie.1.2020.06.17.04.07.35 for ; Wed, 17 Jun 2020 04:07:36 -0700 (PDT)
)
[x-received:] => Array
(
[0] => by 2002:a05:6808:5d3:: with SMTP id d19mr6489412oij.145.1592392056699; Wed, 17 Jun 2020 04:07:36 -0700 (PDT)
[1] => by 2002:a9d:34c:: with SMTP id 70mr6423747otv.224.1592392056486; Wed, 17 Jun 2020 04:07:36 -0700 (PDT)
)
[arc-seal:] => Array
(
[0] => i=2; a=rsa-sha256; t=1592392056; cv=pass; d=google.com; s=arc-20160816; b=ctQ8kJb7AlYgUppPXaN8OwqRTBug+jgqocxEE0BM+dxMhZxJc9oXrNUBAzlxZ8WZ7V TtySbdAKpYu8ZfmweyVhaRAAtJU7SrAbZCFRdlwA4GTO5xXmFHVC5FfdoRhld+U7K685 9rx/oqsXaod+VSl8Pl1fUiXbjV1rQwuLueZmNG6RxgMmvUDvqDC7IWPvYV5Dxka1yicR T2b9aSuoRPxBhpyG4XDyzmJfeX3GPEig3uI3vR2slNQvfX8vUr7xc+rAYoj/h0XMIweB rJGj1pG2AmhQIEwaOdVaPCdN8oZsoRH5a8DTilIZR1bLb0S8ogiU1c2BrtUui7u3hyNv cNkQ==
[1] => i=1; a=rsa-sha256; t=1592392056; cv=none; d=google.com; s=arc-20160816; b=FCKS0DYbBC1ELc6xX4a6rrGuDKhchJreQkU+dzKukMAjQbzAmL4waK6q+NjO/ocOGj 3IzPLcFV8TWJxy/jgh35kFEYIklXkZ7eQrdZ933ahFDbn0cIxTnPFd4qik5UeRn0bJaT 7HoptxRZLZ2enGxTLbSPWZmiJAUOF86KUIEq6yobxCuPkj5JoMrkUOKePQMXvJOwvpo9 2XwqQnfMDT08ySEbuuFPzJ0bW4ZIrcfotUBqTkBGQp89fKFo0icwvTd+WoIISz0OVuQD MZPkzTPR/KSUuqhuPE7faOXcclFtkwV4i0N+kDNtouhyUUzHENC8GU+OLqqksYkCBD29 q7yw==
)
[arc-message-signature:] => Array
(
[0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:reply-to; bh=lOsQ5Mjk34uf/uBX+yiBucUE1S2UnDHy5HnCZf6V8dk=; b=l3pKrBx494FrpRiwfYwvHMZ32C2BBoeDUQ4H838XsLM99TdvrdrOVcOpCQ1VSkKO77 LWJXw/hl6CITFspN8z6lbQpzPi/U1/g/PnuLQMWMlZNwReRMelijq45kjrd+MMSgqvw1 vDC0pDI2q8FNF2jh2mRZ4CMJandadtvoP5j0Mclb+EMShk7f/2m+7PYeTdFaBRO1s7Gz gqHA+OD2Fjyzdz4BHm8hVnBiZGSFgdwaITeLznBHKkfsCCs3AU5a0dEoVtv5hQjpFKlN v69A65VxkYTZR4x+6MslhlA367m5I6ZCyGDQ0jM03NAbfqpUFK65wza/d81r4NRTqQHK txjg==
[1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:reply-to; bh=lOsQ5Mjk34uf/uBX+yiBucUE1S2UnDHy5HnCZf6V8dk=; b=l71gvCAw7yXFTjBQHXrZ6lsyMOSb+PZbz59h3ZNwvjfkUNilsH2o/2gqJLA8fRVCHS 6bjreK1Lsq5/32upEg2aFsk0Dl6/sHDBESacpX5HkPpA63kLZh2NPWao9ZLp3iCZbjQd Q+N0vYasf8oaDobcamaufj41EAgOtQxmnh2NnhvQfdaP6AuGUfG/2cVgZeY0HuYSoeyf 5iyKTx7RIPmgJmTtZu6xhZOtDfEGw72ImFpNTGKLScoHuNbW4MrlRa5qO0o93mnSt47y Ee/aXYjzuiE2+uxi+7GZZ+4FO9MkqZw4GbNuG22hkKbdB6D14s0Qn1uFQr7L/85mExHA Wm2Q==
)
[arc-authentication-results:] => Array
(
[0] => i=2; mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning secureserver@servers.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=secureserver@servers.com; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=servers.com
[1] => i=1; gmr-mx.google.com; spf=softfail (google.com: domain of transitioning secureserver@servers.com does not designate 103.125.189.73 as permitted sender) smtp.mailfrom=secureserver@servers.com; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=servers.com
)
[received-spf:] => Array
(
[0] => softfail (google.com: domain of transitioning secureserver@servers.com does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
[1] => softfail (google.com: domain of transitioning secureserver@servers.com does not designate 103.125.189.73 as permitted sender) client-ip=103.125.189.73;
)
[authentication-results:] => mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning secureserver@servers.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=secureserver@servers.com; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=servers.com
[x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:reply-to:from :to:subject:date:message-id:mime-version:content-transfer-encoding; bh=lOsQ5Mjk34uf/uBX+yiBucUE1S2UnDHy5HnCZf6V8dk=; b=HpHahDN+s4GTDZbD48WheZOfS14a5jURFtyHWzRu8WzZ551Dqgw6tMY98iOwjImT5i aaTLLx7gabDjZgqFCnVw7fHuZdw/HQJp3amRKHHUWl9BxuLQHByiEtQnJmyS09N3SyAs LWih6SkROb46Tx0KUElBRIH0Lbiks0ktZuaTY5TiKxygcbljcHpJDe4OfxuFxEvG8qSS MdTbDcHyfOxJHKgmDI6rrf6gpA9Wcpua568gDxQQRFFQS0gUso9KRQcwQyDg7Rgo2bEn UtzH9SGZEXOe8zVWPijYkSo9FoRlWiEJW2yvLBe9GzaKLsGVZ9srdE9kWeSvCwcXu+PF GBlQ==
[x-original-authentication-results:] => gmr-mx.google.com; spf=softfail (google.com: domain of transitioning secureserver@servers.com does not designate 103.125.189.73 as permitted sender) smtp.mailfrom=secureserver@servers.com; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=servers.com
[x-gm-message-state:] => AOAM533SmYfaH3asTFOonCyfnhkpjGmHadzkKlOpRMHgOomQiG06ZyIK HZzvBp5AnxCa5w7kPKNQJJ/dlCMaBJ2pzwQPdQ==
[x-google-smtp-source:] => ABdhPJz8/1jsbE+WGCNCUbmAqhj1oBGxxrX3uNZa5ZUPAFyy/GEgeuzPZqIYIuldcGyAatzotdokulP8ItdVeXYHo1l5ulz5gr0=
[reply-to:] => mr.brent556@gmail.com
[from:] => Mr. Colin Brent
[to:] => submittedemails@scamdex.com
[subject:] => Letter Of Intent
[date:] => 17 Jun 2020 04:07:34 -0700
[message-id:] => <20200617040733.68652EBB83A8D3FA@servers.com>
[mime-version:] => 1.0
[content-type:] => text/html
[content-transfer-encoding:] => quoted-printable
[x-getmail-retrieved-from-mailbox:] => =?utf-8?q?=5BGmail=5D/Spam?=
[x-gmail-thrid:] => =?utf-8?q?1669744093230756509?=
[x-gmail-msgid:] => =?utf-8?q?1669744093230756509?=
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am Mr. Colin Brent, the newly appointed Head of Operations, HSBC BANK, North Towers Branch, Bangkok, Thailand. I was promoted to this exalted position some Four Months ago.
Following the ongoing debt settlement program by HSBC BANK, in my position as the overall head of operations I requested all the directors from their various departments at HSBC BANK to notify beneficiaries whose payments are still pending to have their payment files scrutinized for immediate payment.
Your payment files number HSBC-WBSSC/0177/18, is among the files in my Office for payment process. I have gone through your payment files to discover that you had made several attempts to claim your payment, but unfortunately there are always hitches on the process.
I also discovered that over 80% of the beneficiaries waiting for their payment are having the same problem, mostly financial backup to claim their inherited funds. To have this situation resolved, we have approved two ways to amicably settle this debts matter.
For those who are not able to afford the financial requirements claiming their funds, the authorities of HSBC BANK Thailand, have decided to provide them with affordable means to resolve their long overdue payment.
If you can not be able to afford the cost of processing your payment, the authority of HSBC BANK, will provide you a reasonable opportunity and privilege to resolve this long over payment matters.
The way out is for the authorities of HSBC BANK, to release 50% of your total payment sum to you without you paying the bank charges, then when you received your funds into your home bank account, as soon as you confirmed the first 50% of your long overdue payment, it is only when you received 50% of your money you will pay all the bank charges to HSBC BANK, then the remaining of your money will be released pay and transfer to your account without further delays .
With this arrangement I must let you know that you will issue the authorities of HSBC BANK, a promissory letter to promise and assure HSBC BANK that you will pay all the accrued bank charges when you must have received 50% of your entire payment sum. Be reminded that your promissory letter must be stamped at the Oath commissioner's office accordingly and you will be responsible for the little amount.
I am contacting you through my personal email address and I do not have any personal interest than assisting you to accomplish your aims.
If this is okay with you I want you to get back to me to open official communication with you.
Mr.Colin Brent Head Of Operations HSBC BANK, North Towers Branch. Bangkok, Thailand. Tel:- +66 871268403
Attention submittedemails,
I am Mr. Colin Brent, the newly appointed Head of Operations, HSBC BANK, North Towers Branch, Bangkok, Thailand. I was promoted to this exalted position some Four Months ago.
Following the ongoing debt settlement program by HSBC BANK, in my position as the overall head of operations I requested all the directors from their various departments at HSBC BANK to notify beneficiaries whose payments are still pending to have their payment files scrutinized for immediate payment.
Your payment files number HSBC-WBSSC/0177/18, is among the files in my Office for payment process. I have gone through your payment files to discover that you had made several attempts to claim your payment, but unfortunately there are always hitches on the process.
I also discovered that over 80% of the beneficiaries waiting for their payment are having the same problem, mostly financial backup to claim their inherited funds. To have this situation resolved, we have approved two ways to amicably settle this debts matter.
For those who are not able to afford the financial requirements claiming their funds, the authorities of HSBC BANK Thailand, have decided to provide them with affordable means to resolve their long overdue payment.
If you can not be able to afford the cost of processing your payment, the authority of HSBC BANK, will provide you a reasonable opportunity and privilege to resolve this long over payment matters.
The way out is for the authorities of HSBC BANK, to release 50% of your total payment sum to you without you paying the bank charges, then when you received your funds into your home bank account, as soon as you confirmed the first 50% of your long overdue payment, it is only when you received 50% of your money you will pay all the bank charges to HSBC BANK, then the remaining of your money will be released pay and transfer to your account without further delays .
With this arrangement I must let you know that you will issue the authorities of HSBC BANK, a promissory letter to promise and assure HSBC BANK that you will pay all the accrued bank charges when you must have received 50% of your entire payment sum. Be reminded that your promissory letter must be stamped at the Oath commissioner's office accordingly and you will be responsible for the little amount.
I am contacting you through my personal email address and I do not have any personal interest than assisting you to accomplish your aims.
If this is okay with you I want you to get back to me to open official communication with you.
Reply: mr.brent556@gmail.com
Regards
Mr.Colin Brent Head Of Operations HSBC BANK, North Towers Branch. Bangkok, Thailand. Tel:- +66 871268403